Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File:                     ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier:          RhAXCzpK+yGbM4PaZL4sp2isVlKO8h2D0t6ABNP5QAo=
Subject key identifier:   1C:8E:68:89:FD:6A:A8:6A:39:C6:1B:B8:EB:4B:AA:85:3F:8C:99:C3
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer:       /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial:       0663
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number:          0651
Signing time:             Mon 06 Apr 2026 22:27:18 +0000
Manifest this update:     Mon 06 Apr 2026 22:27:17 +0000
Manifest next update:     Mon 13 Apr 2026 22:27:17 +0000
Files and hashes:         1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: C9bL0QawpdU3Qx6C5TBRVuGuBNdN71fHarX8bnvb1qo=)
                          2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=)
                          3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: rcfOfPwM1mtTZBMyIgbUUmBfYL7Ft727iB8QQjEHiwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
                          rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 22:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
        Validity
            Not Before: Apr  6 22:27:17 2026 GMT
            Not After : Apr 13 22:27:17 2026 GMT
        Subject: CN=69d43345-de89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:70:b5:47:43:78:b0:25:99:67:40:a8:c0:
                    22:9c:8c:0e:74:71:6a:e4:33:cc:e4:b5:55:bf:9d:
                    bf:ba:6a:d3:77:ab:29:97:d9:65:14:bf:9f:a5:8b:
                    28:d8:8b:ed:40:ce:e0:0b:17:e8:64:4e:56:b7:38:
                    62:10:30:01:02:7a:f5:53:90:80:6a:bd:c0:28:50:
                    1d:4c:05:0d:50:45:f4:34:ac:06:78:47:0b:61:5d:
                    04:79:1a:b7:14:66:5e:46:d7:7b:21:79:67:eb:71:
                    53:51:c2:bc:89:35:cb:cd:3c:f1:01:69:ad:6e:53:
                    86:20:47:2c:15:94:74:b5:f8:b9:c0:66:70:fa:56:
                    28:d2:94:8d:4e:6c:9a:ec:90:25:24:b8:a7:8c:78:
                    c8:18:29:1f:53:de:52:c1:e1:49:94:db:dd:e0:d5:
                    21:eb:21:2b:57:6d:76:86:e3:a4:9d:17:d0:02:58:
                    0c:58:d2:06:b0:83:c6:4f:a1:4d:fd:65:04:af:ba:
                    ac:45:e9:6e:d2:55:11:9b:f2:ff:d6:06:d1:f6:7c:
                    d7:cd:14:07:07:c2:7f:9d:3f:3a:72:95:db:91:82:
                    c2:ab:2b:18:f9:43:00:b3:44:8e:f8:96:51:9b:cc:
                    d2:22:7d:ea:cb:5a:6f:fa:fa:62:fa:3c:f8:e0:2c:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8E:68:89:FD:6A:A8:6A:39:C6:1B:B8:EB:4B:AA:85:3F:8C:99:C3
            X509v3 Authority Key Identifier:
                keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:0b:de:ea:40:3d:8c:13:e1:48:ac:52:80:3e:e7:f9:b7:
         70:e0:5a:4e:ab:dc:ea:4e:f1:ea:e6:66:07:e1:78:23:9d:e0:
         c2:6f:c9:b2:ae:a3:93:00:a0:b3:37:85:81:ac:f4:13:e4:47:
         c9:a0:6e:75:37:e8:30:42:45:7c:62:08:20:dc:2b:63:50:cb:
         5b:75:21:04:3c:ee:66:eb:51:ed:14:ca:1e:c4:0d:c2:cf:9c:
         0a:8e:d5:3e:49:2b:e5:55:91:9b:8c:bf:92:b3:c2:16:c7:00:
         ae:2d:a1:ca:79:da:cf:45:59:35:61:dc:d0:f1:28:ff:75:4b:
         ec:fc:8b:18:e2:3a:0d:ac:88:54:64:ee:df:cd:9c:45:ce:c1:
         4e:9e:a1:47:18:f5:bc:a3:a5:3c:6b:2d:0e:ee:30:d9:45:60:
         31:5b:44:5f:48:01:f7:88:f2:34:cf:d5:6b:65:34:53:08:0e:
         b0:96:f4:98:bb:9c:8a:87:4f:7e:74:af:5d:1e:90:9a:f8:f3:
         d2:49:e6:c4:ed:13:db:3b:e8:63:0f:8a:9a:c5:ea:b8:bc:a7:
         53:3d:73:d8:ca:20:7b:27:af:57:12:81:e5:02:37:b6:08:2f:
         9e:23:6f:c4:60:8f:08:c9:df:c4:03:a8:4a:bf:9a:e6:00:13:
         d0:94:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:03:39 2026 by rpki-client